Check Point CloudGuard WAF Reviews

Name: Check Point CloudGuard WAF
Brand: Check Point Software Technologies
Rating: 4.4 (43 reviews)

Vendor: Check Point Software Technologies

4.4 out of 5

43 reviews
100% willing to recommend

What is Check Point CloudGuard WAF?

Check Point CloudGuard WAF (Web Application Firewall) is a cloud-native security solution designed to protect web applications and APIs from known and unknown threats. It employs contextual AI and machine learning to prevent zero-day attacks without relying on traditional signature-based detection methods, ensuring that applications remain secure even as new threats emerge.

Get the Check Point CloudGuard WAF Buyer's Guide and find out what your peers are saying about Check Point CloudGuard WAF, SonarQube Server (formerly SonarQube), Checkmarx One and more!

Check Point CloudGuard WAF is the #10 ranked solution in application security solutions and #12 ranked solution in top Web Application Firewalls. PeerSpot users give Check Point CloudGuard WAF an average rating of 8.8 out of 10. Check Point CloudGuard WAF is most commonly compared to SonarQube Server (formerly SonarQube): Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube). Check Point CloudGuard WAF is popular among the large enterprise segment, accounting for 61% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 18% of all views.

Buyer's Guide

Check Point CloudGuard WAF

March 2025

Get the report

Helped 842,388 peers since 2012

Featured Check Point CloudGuard WAF reviews

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

CloudGuard WAF is a very straightforward solution. I do not have to worry about signatures. Most of the solutions that are out there are mainly based on signatures, and I have to do a lot of maintenance to get the signature updates, and sometimes, due to a lack of resources, I am not able to do so. With CloudGuard WAF, I have peace of mind, because most of the features are AI-based, and there is not much configuration that needs to be done on my side. Once set, I only go to CloudGuard WAF to check. I do not have to worry about signatures or updates. Everything is done perfectly, and I have a sense of peace because I know our applications are safe. It is very important for us that CloudGuard WAF protects our applications against threats without relying on signatures. That is definitely one of the key features I need.

Read full review

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

This solution not require training. It has its own mechanisms, eliminating the need for training for our applications. The learning curve is quick. It provides security for our services to customers. As a financial institution, we provide security to our customers and products. The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively. The solution reduced the cost to the company when considering that we,with a previous solution, spent many hours on configurations. It reduced our false positive rate significantly - by 90%.

Read full review

Rui Dias

Sysadmin at a government with 501-1,000 employees

The DirectStorage gives me a view that I did not have that occurs on the web servers. It allows me to show results and reports to demonstrate the attacks, the number of attacks, and prevention measures. It protects against threats without relying on signatures. The zero-day attacks could be bad. Without this, we wouldn't know al the attacks we're getting. It allows us to save time manually analyzing on the web servers. It frees us up. It helps against zero-day attacks and protects against anomalies. It's one of the factors that made us choose this solution.

Read full review

Check Point CloudGuard WAF mindshare

Product category:

As of March 2025, the mindshare of Check Point CloudGuard WAF in the Application Security Tools category stands at 0.1%, up from 0.1% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

PeerAnalyst reports based on Check Point CloudGuard WAF reviews

Type	Title	Date
Category	Application Security Tools	Mar 26, 2025	Download
Product	Reviews, tips, and advice from real users	Mar 26, 2025	Download
Comparison	Check Point CloudGuard WAF vs SonarQube Server (formerly SonarQube)	Mar 26, 2025	Download
Comparison	Check Point CloudGuard WAF vs Veracode	Mar 26, 2025	Download
Comparison	Check Point CloudGuard WAF vs Checkmarx One	Mar 26, 2025	Download

Title	Rating	Mindshare	Recommending
SonarQube Server (formerly SonarQube)	4.0	25.5%	81%	114 interviews Add to research
Checkmarx One	3.8	11.0%	87%	70 interviews Add to research

Valuable Features

Check Point CloudGuard WAF offers valuable features such as easy API integration, high scalability, and automated threat detection using AI without relying on signatures. It provides comprehensive visibility, advanced security capabilities like Intrusion Prevention System, and efficient regulatory compliance management. The intuitive interface ensures low false positives. It enhances security with features like powerful logging, rate limiting, and robust application protection, effectively preventing zero-day attacks and automated threats.

"The ability to preemptively block zero day attacks and detect hidden anomalies is exactly its advantage."
"Overall, the product is excellent."
"Check Point CloudGuard WAF works well for preemptively blocking Zero Day attacks and detecting hidden anomalies."

Room for Improvement

Check Point CloudGuard WAF faces issues with high costs and limited trial periods. Users report challenges with integration, latency, and support services. Navigation and documentation improvements are desired, along with better security customization and mobile application protection. Simplified configurations and real-time threat detection would be beneficial. Users express dissatisfaction with English-only support and the need for clearer pricing. Enhancements in reporting accuracy and interface functionality are needed to boost user satisfaction.

"I would like it to be able to analyze more complex functions, although I did not examine the case study of more complex implementations. Things like forum fields, etc seem to need a little more focused protection of the fields scheme validation."
"I am pretty happy with the current version. I have not yet used it to its full potential, but there could be improvements as I explore it further."
"When I migrate the traffic from our mobile application to CloudGuard, we are not getting what we expected."

ROI

Users experienced substantial returns, including increased security, cost reduction, and streamlined operations with Check Point CloudGuard WAF. Many saw over 70% ROI while some observed efficiency gains, reduced incident response times, and improved productivity. The transition from managing multiple servers led to noticeable cost savings. However, a few expect long-term advantages but have yet to see exact metrics. Consolidating security tools with Check Point CloudGuard WAF contributed to significant savings annually.

Pricing

Enterprise buyers evaluating Check Point CloudGuard WAF note that pricing is competitive but varies significantly depending on business size and needs. Costs may appear high compared to alternatives like Azure WAF and FortiWeb, yet many feel the advanced features and support justify the expense. Overall, while setup is simple and renewal straightforward, licensing costs can be complex, especially for small organizations. Pricing includes the base solution and additional fees for licenses and support.

"The sales team or account managers from Check Point are top-notch. As I am using other products as well, my pricing was competitive compared to others."
"As Infiniti customers, the pricing is manageable, as we have allowances dedicated to each Check Point product. The price is not as high compared to other options I have dealt with in the past."
"The base solution costs approximately 30,000 euros, with an additional 2,000 euros per year for licenses and support."

Popular Use Cases

Check Point CloudGuard WAF is predominantly used to secure web applications and APIs. It offers protection against threats like SQL injection, cross-site scripting, and malware in multi-cloud environments, including Azure and AWS. Integrating with automation tools, it aids in threat detection and response, optimizing resource use and cost savings. Its AI-driven capabilities efficiently filter internet traffic, ensuring only legitimate requests reach APIs, helping organizations comply with security standards.

Service and Support

Check Point CloudGuard WAF provides mixed customer service and technical support experiences. While some find the assistance knowledgeable and responsive, others report issues with slow resolution times and a need for improvement. Customers appreciate dedicated staff and beneficial interactions with engineers, rating support highly. However, gaps such as limited weekend coverage are noted. The overall impression indicates knowledgeable support but highlights areas for enhancement in response times and coverage.

Deployment

Many found Check Point CloudGuard WAF's initial setup easy and straightforward, requiring minimal time and effort. While some experienced difficulties in configuration due to complex settings, others highlighted the necessity of proper training. Deployment was often rapid, aided by vendor guidance and thorough documentation. Onboarding was reportedly structured, with assistance available when needed. Third-party vendors occasionally facilitated smoother transitions, ensuring efficient integration with cloud environments like AWS and Azure.

Scalability

Check Point CloudGuard WAF is noted for its excellent scalability. Users describe it as highly adaptable and functional across cloud environments. Many emphasize ease in scaling, with licensing based on traffic needs rather than the number of applications. It consistently performs well and is considered among its best features. Users consistently rate it high in terms of scalability, indicating it handles various workloads effectively and supports organizations' growth plans.

Stability

Check Point CloudGuard WAF demonstrates excellent stability, providing peace of mind and strong reliability. Many users report no downtime or errors, rating stability highly, often nine or ten out of ten. Some faced minor issues, particularly during updates or configuration, but these were resolved quickly. Stability during critical tasks impressed several users, with consistent performance and minimal disruptions, although a few mentioned occasional lags and crashing. Stability remains commendable throughout.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Check Point CloudGuard WAF Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

18%

Computer Software Company

15%

Manufacturing Company

10%

Comms Service Provider

Healthcare Company

Educational Organization

Logistics Company

Recruiting/Hr Firm

Security Firm

Construction Company

University

Transportation Company

Energy/Utilities Company

Retailer

Wholesaler/Distributor

Government

Media Company

Outsourcing Company

Non Profit

Hospitality Company

Real Estate/Law Firm

Performing Arts

Leisure / Travel Company

Compare Check Point CloudGuard WAF with alternative products

Learn more about Check Point CloudGuard WAF

CloudGuard WAF offers preemptive protection against vulnerabilities by using machine learning to identify and block zero-day threats like Log4Shell and Spring4Shell. It provides precise detection capabilities, minimizing the need for constant fine-tuning and reducing false positives. Designed for cloud-native environments, CloudGuard WAF integrates seamlessly with CI/CD pipelines, supporting automated deployment and configuration through infrastructure as code (IaC) or APIs.

Key Features of CloudGuard WAF:

ML-Based Threat Prevention: Stops application-layer attacks, including those listed in the OWASP Top 10, with minimal tuning and no reliance on signature updates.
API Discovery and Security: Identifies and secures APIs, preventing misuse and enforcing API schemas to protect against unauthorized access.
Bot and DDoS Prevention: Detects and mitigates automated attacks that can disrupt services or degrade customer experiences.
Intrusion Prevention (IPS): Provides protection against over 2,800 web-related CVEs using Check Point’s award-winning IPS technology.

Benefits of CloudGuard WAF:

Zero-Day Protection: Mitigates risks from newly discovered vulnerabilities without waiting for signature updates.
Reduced Operational Overhead: Eliminates the need for constant manual tuning and exception handling, simplifying security management.
Comprehensive API Security: Enhances control over your attack surface by discovering and securing all APIs, including shadow, rogue, and deprecated endpoints.
Fast and Easy Deployment: Deployable within minutes via WAF as a Service (WAFaaS), requiring only a one-time DNS configuration for immediate protection.

CloudGuard WAF is particularly suitable for organizations using modern, cloud-based architectures that require robust, automated security measures for both applications and APIs. Its capabilities are valuable for industries that handle sensitive data, such as finance or healthcare, where compliance and data protection are critical. Pricing and support are typically customized to the specific needs and scale of the deployment, with options for continuous updates and maintenance through Check Point's managed services.

CloudGuard WAF by Check Point provides advanced, AI-driven protection for web applications and APIs, offering automated, precise threat prevention and easy integration with cloud-native environments, ensuring robust security without the need for extensive manual configuration.

Check Point CloudGuard WAF was previously known as Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec.